🇺🇸
TPI-Abuse
2026-10-21 02:05:24
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 92.114.86.178 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 92.114.86.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 22:05:20.136657 2026] [security2:error] [pid 11034:tid 11034] [client 92.114.86.178:56920] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "artbycorinnedodge.com"] [uri "/sftp-config.json"] [unique_id "atgd4K7i_GBN9rKRLbU9JAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2026-10-20 06:35:30
(1 day ago)
(web_sensitive_file) srv201 Sensitive file probe (.env/.git/backup) 92.114.86.178 (IT/Italy/-): 2 in ...
show more
(web_sensitive_file) srv201 Sensitive file probe (.env/.git/backup) 92.114.86.178 (IT/Italy/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇫🇷
LRob
2026-10-20 05:05:36
(1 day ago)
Secret file probe | method: GET | path: /.vscode/sftp.json | ua: Mozilla/5.0 (Windows NT 10.0; Win64 ...
show more
Secret file probe | method: GET | path: /.vscode/sftp.json | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 14:33:17
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 92.114.86.178 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 92.114.86.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 10:33:10.097813 2026] [security2:error] [pid 14299:tid 14299] [client 92.114.86.178:7248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "schonmusic.com"] [uri "/sftp-config.json"] [unique_id "atYqJuq82kjo-uHJOu7b_wAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 06:22:07
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 92.114.86.178 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 92.114.86.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 02:22:01.491078 2026] [security2:error] [pid 25682:tid 25682] [client 92.114.86.178:35852] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sfprivatechef.com"] [uri "/sftp-config.json"] [unique_id "atW3CVb2lqNUWXRJYv-nagAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 16:12:33
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 92.114.86.178 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 92.114.86.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 12:12:30.576469 2026] [security2:error] [pid 10955:tid 10955] [client 92.114.86.178:37880] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.step1nutrition.com"] [uri "/sftp-config.json"] [unique_id "atOebk6AbFnL3gejb1_s8gAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 22:09:03
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 92.114.86.178 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 92.114.86.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 18:07:16.678362 2026] [security2:error] [pid 19934:tid 19934] [client 92.114.86.178:44714] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "caddydad.com"] [uri "/sftp-config.json"] [unique_id "atKgFHS6XPOfdy512YKN6wAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
A000Z
2026-08-15 02:13:20
(2 months ago)
Fail2Ban: 92.114.86.178 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5. ...
show more
Fail2Ban: 92.114.86.178 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0
show less
Bad Web Bot
🇮🇹
IRT@Unisi
2026-08-03 01:25:27
(2 months ago)
Multiple web server 400 error codes from same source ip.
Bad Web Bot
🇺🇸
TPI-Abuse
2025-11-12 23:07:09
(11 months ago)
(mod_security) mod_security (id:225170) triggered by 92.114.86.178 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 92.114.86.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 12 18:07:02.417811 2025] [security2:error] [pid 3249:tid 3249] [client 92.114.86.178:2550] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||benshermanguitar.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "benshermanguitar.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aRUTFtq5DyzWqia1BfTjqwAAADA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-12 20:51:41
(11 months ago)
(mod_security) mod_security (id:225170) triggered by 92.114.86.178 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 92.114.86.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 12 15:51:33.465826 2025] [security2:error] [pid 9081:tid 9108] [client 92.114.86.178:45100] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||stonyp.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "stonyp.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aRTzVQ9ixfBdsSfJcgk3dAAAAFg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
kjaerulff
2025-11-12 20:31:38
(11 months ago)
Failed Wordpress login using wp-login.php
Web App Attack
